EUVD-2021-0866

Malware in sbrugna...

Cross-site Scripting (XSS) in @scullyio/scully

This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify function and then written into the HTML page...

Scullyio Scully Code Execution Vulnerability

Scullyio Scully is a Typescript-based software for building Angular applications organized by Scullyio.Scully pre-renders every page in the application as plain HTML and CSS.To do this, Scully uses guessjs to find all the routes in the project. Scully then accesses each route, renders the view an...

CVE-2020-28470

This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify function and then written into the HTML page...

CVE-2020-28470: Improper Neutralization of Input During Web Page Generation

This affects the package @scullyio/scully before 1.0.9. The transfer state is serialised with the JSON.stringify function and then written into the HTML page...

PT-2021-11538

Name of the Vulnerable Software and Affected Versions: @scullyio/scully versions prior to 1.0.9 Description: The issue affects the package @scullyio/scully. It involves the serialization of the transfer state using the JSON.stringify function, which is then written into the HTML page...